Privacy notice on the processing of personal data and your rights
In the case that you provide your personal data, we, as the data controller Stanica Nivy s. r. o., having its registered seat at Mlynské Nivy 16, 821 09 Bratislava, the Slovak Republic, ID No.: 50 861 930, registered with the Commercial Register maintained by the District Court Bratislava I, Section: Sro, File No.: 120152/B (hereinafter referred to as “Nivy” or “we”) would like to inform you about the processing of your personal data and of your rights related to the said processing.
HB Reavis is part of the HB Reavis Group, which consists of all the entities consolidated under the group holding HB Reavis Holding S.A. with its headquarters in Luxembourg, due to which the reference to HB Reavis Group may be found in the Privacy Notice (hereinafter referred to as the “HB Reavis Group”).
Personal data is processed for the following processing activities:
1. Ensuring the safety of visitors and users of the building as well as the protection of the building and property
2. The acceptance, processing and handling of complaints
3. The issuing of entry cards
4. Mutual communication
5. The sending of reminders
6. The provision of preference analyses
7. Promotion of our events
8. The operation of a “help desk”
9. The issuing of cards for waste disposal
10. The administration of incidents in Nivy
11. Invoice issuance
12. The provision of WiFi
13. The “Ahoj Nivy” application
14. Nivy Grill
15. Finding your car in the parking lot
16. Nivy gift cards
17. GDPR complaints
A further description of our purposes:
1. Ensuring the safety of visitors and users of the building as well as the protection of the building and property
What is our purpose for and legitimate interest in processing your personal data?
The protection of our buildings and the safety of the people using our buildings are the key elements and the number one priority in our business activities. For us to be able to ensure the proper level of protection and safety, we installed a video monitoring system (CCTV). When entering the buildings or if you are near them, the CCTV might record you. If you enter the building or garage, we will record you in the following ways:
a) We scan your vehicle licence plate number (LPNo) if you use the intercom system located at the ramp;
b) We scan your LPNo if the LPNo recognition technology for the automatic opening on the ramp for authorised vehicles is used in conjunction with the vehicle or enter the garage using an entry card;
c) We scan your LPNo when opening the ramp in order to ensure free parking. Once the free parking period expires, we process this data in order to determine the exact parking fee;
d) We collect data regarding the entry card upon entry and departure through contact points in the building, i.e. from the public part to the private part of the building, so that we ensure access for authorised persons only;
e) We produce your visual images by means of an installed CCTV camera system, which records the internal spaces of the building, the parking lot and part of the area outside the building.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR for the protection of our rights and interests and for ensuring security in our premises.
What kind of personal data do we process?
a) A photograph of your LPNo;
b) A photograph of your LPNo;
c) A photograph of your LPNo;
d) Card number, place and entry time;
e) A visual image of you and photograph of your LPNo
How long do we store your personal data?
a) We store your personal data for 7 days.
b) We store your personal data for the duration of the accounting year
c) We store your personal data for 6 months.
d) We store your personal data for 6 months.
e) We store your personal data captured by cameras located in the building or in the parking lot and on the outside of the building for 15 days. We store your personal data captured by cameras that capture parking spaces directly for a period of 3 days.
2. The acceptance, processing and handling of complaints
What is our purpose for and legitimate interest in processing your personal data?
In each lift in the building there are voice communicators through which it is possible to contact the central security desk of the building in real time should a problem arise. These calls are recorded so that in case of a complaint associated with the handling of a problem, we have an audio recording of the given event available.
What is our legal basis for the processing of your personal data?
In the cases of the acceptance, processing and handling of complaints, we process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
An audio recording of the complaint or call.
How long do we store your personal data?
We store your personal data for 15 days.
3. The issuing of entry cards
What is our purpose for and legitimate interest in processing your personal data?
For us to permit you to enter the premises of your employer, we will issue you an entry card that allows you access to the restricted premises of the building.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR to issue entry cards.
What kind of personal data do we process?
Name, surname and the business name of your employer
How long do we store your personal data?
For the duration of your contractual relationship with our tenant or the duration of the rental relationship, whichever relationship ends first.
4. Mutual communication
What is our purpose for and legitimate interest in processing your personal data?
Our philosophy is to always be open and transparent. This includes being open to communication from any person interested in us. To fulfil this goal, we created several types of contact forms that can be used to contact us. Additionally, we have also published the email addresses of employees working for us so you can contact them at any time with any questions related to Nivy and the business you may have. However, to ensure effective, flawless and clear communication, we must process some of your personal data.
What is our legal basis for the processing of your personal data?
If you contact us or any employee via email or a web-based form, we process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Name, surname, email address and phone number. For the purposes of the CRM database, in addition to the aforementioned data, we also process job title and employer identification data.
How long do we store your personal data?
We keep your personal data until you unsubscribe from our contact database.
5. The sending of reminders
What is our purpose for and legitimate interest in processing your personal data?
We also process your personal data for the purpose of sending reminders related to unsent webpage forms. Whenever you start filling out any webpage form published on our website, we automatically process the personal data you fill in. In some cases, you might forget to send the form. Therefore, we use the automatically saved personal data to remind you to finish filling out the form or to send the filled-out form.
Moreover, when executing the leasing process with our (potential) clients we strive to maintain very effective and transparent communication canal. To fulfil this purpose, we use the CRM database filled with contact data (including personal data) of our (potential) clients or their employees. We do this to ensure effective and flawless communication with the (potential) clients and to build a database consisting of all our business partners.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR to send you reminders related to unsent webpage forms.
What kind of personal data do we process?
Personal data requested by the webpage form (such as name, surname, email, phone number, etc.).
How long do we store your personal data?
We store your personal data for 30 days.
6. Preference analysis and the provision of personalised marketing content
What is our purpose for processing your personal data?
We also process your personal data for the purpose of targeted marketing. We will analyse your personal data to build your individual profile. The profile is used to predict your future interests and display targeted (online) advertisements. If we identify you by cookies or email, you will see the content on the website that is relevant to your segment or profile. The aim is to provide you with offers that are relevant and interesting for you. The analysis is based on your (surfing) behaviour on the Internet. We conduct such preference analyses solely for the purpose of providing you with more attractive offers for the purchasing of goods and/or services and customising the content of websites according to your preferences. Moreover, it is to ensure the promotion of our products and services, improving our brand and goodwill by providing you with our personalised newsletters, invitations to our events, marketing alerts and follow-up marketing materials via the various available channels such as email marketing communication, SMS messages, pop-up windows, online remarketing ads (Google Ads, Facebook ads, native ads…).
What is our legal basis for the processing of your personal data?
We process your personal data based on consent under Article 6 (1) (a) of GDPR.
What kind of personal data do we process?
Name, surname, email and phone number, gender, login information, time zone setting, operating system and platform, information about visits including the URL, the search terms, information about what you viewed or searched on our website, page response times, download errors, the length of visits to certain pages, page interaction information, (such as scrolling, clicks and mouse-overs) and the methods used to browse away from the page, the activities of users, the browsed web pages and the version of the “Ahoj Nivy” application installed on your device.
How long do we store your personal data?
If you give us consent to provide you with our personalised marketing content and newsletter, we store your personal data until you unsubscribe from our consent database.
7. Promotion of our brand, goodwill, services and events
What is our purpose for and legitimate interest in processing your personal data?
Furthermore, we may process your personal data by taking photographs and audio-visual recordings, which are used for the purpose of and legitimate interest in the promotion of our events and services and to help us improve our brand and goodwill by publishing the photographs (where it is possible that you will appear) and audio-visual recordings on our social media profiles such as YouTube, LinkedIn, Facebook, Twitter and Instagram, as well as via other channels such as our websites.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Photographs or/and audio-visual images of you. In the case of private events, also your name, surname and email address will be processed.
How long do we store your personal data?
We may process your personal data for the entire existence of the HB Reavis Group.
8. The operation of a “help desk”
What is our purpose for and legitimate interest in processing your personal data?
We process your personal data to ensure that our contractual obligations arising from the contract with a third party (our tenant and the company on whose behalf you are acting), in which you are in the position of the contact person, are effectively fulfilled. Based on the contract with your employer, we provide a help desk application for reporting issues in connection with the building in which the offices of your employer are situated. To properly use the application, you or your employer provided us with your personal data, as you are the designated person for communication in the application. We need to process your personal data to ensure effective, flawless and clear communication, as well as to ensure the fulfilment of our obligations towards the companies on whose behalf you are acting.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Title, name, surname, position, place of work, signature, email address, phone number, the identification information of your employer.
How long do we store your personal data?
During your contractual relationship with our tenant or the duration of the rental relationship, whichever relationship ends first.
9. The issuing of cards for waste disposal
What is our purpose for and legitimate interest in processing your personal data?
As you may know, each rental unit generates waste. To enable efficient and fair waste collection, we issue a card to each tenant that records exactly how much waste per month the rental unit produces. Because the waste will be exported by tenant employees, personal data may be processed during this activity.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR to issue cards for waste disposal.
What kind of personal data do we process?
The rental unit and the unique identifier of the tenant.
How long do we store your personal data?
During your contractual relationship with our tenant or the duration of the rental relationship, whichever relationship ends first.
10. The administration of incidents in Nivy
What is our purpose for and legitimate interest in processing your personal data?
Your personal data is processed for the purpose of the administration of incidents that occur in Nivy, such as car accidents in the parking lot, etc. When such an incident occurs, it is necessary to fill out an incident form for insurance purposes and other legal matters.
What is our legal basis for the processing of your personal data?
Your personal data is processed during the insurance event in accordance with Article 6 (1) (f) GDPR, i.e. we process your personal data on the basis of legitimate interests.
What kind of personal data do we process?
The requested data on the insurance form.
How long do we store your personal data?
We store your personal data only during the time that it is strictly necessary to deal with the insurance event.
11. Invoice issuance
What is our purpose for processing your personal data?
For us to issue VAT invoices for using the parking lots in Nivy, we have to process some personal data.
What is our legal basis for the processing of your personal data?
Your personal data is processed during the issuance of invoices in accordance with Article 6 (1) (c) GDPR, i.e. the processing is necessary for compliance with a legal obligation to which our company is subject.
What kind of personal data do we process?
Name and surname, the address of residence or address of the place where he/she usually resides, tax identification number.
How long do we store your personal data?
Your personal data will be processed during the period set by the applicable legal obligation or in line with it.
12. The provision of WiFi
What is our purpose for processing your personal data?
The provision of the public WiFi network is as defined in the document PRINCIPLES AND CONDITIONS OF USE OF THE PUBLIC WIFI NETWORK (hereinafter referred to as the "Conditions"). The link to the document is here: https://nivy.com/en/wifi-terms-and-conditions
What is our legal basis for the processing of your personal data?
To ensure the provision of WiFi, your personal data is processed in accordance with Article 6 (1) (b) GDPR.
What kind of personal data do we process?
If you log in via the form, we will process your email address. In the case of logging in via social networks: your name, surname, email, telephone, gender, age and date of birth.
How long do we store your personal data?
We process your personal data for the duration of our contractual relationship.
13. The “Ahoj Nivy” application
What is our purpose for and legitimate interest in processing your personal data?
The “Ahoj Nivy” application unlocks a range of special offers, prices and limited campaigns to all registered members. It enables them to discover and follow stores, events and news, as well as see the map. The content of the app and advertisements is personalised in real time based on members’ preferences, which are gathered from their activity in the app and in the mall thanks to iBeacons, the Bluetooth devices used for location tracking. You can use some of the above-mentioned benefits even if you only download it and do not register in the "Ahoj Nivy" application.
If you download our mobile application without registration, we may perform the following processing operations for the following purposes:
a) We process your personal data that you provided to us when downloading, installing and using the "Ahoj Nivy" application in order to send customised marketing content without your identification;
b) We generate anonymous aggregated statistics regarding the effect of relevant marketing campaigns.
If you have downloaded the “Ahoj Nivy” application and you have registered and given your consent (in the case of point c) you give your consent directly to your phone's operating system and not to
the "Ahoj Nivy" application), we may perform the following processing operations for the following purposes:
c) If the data subject is in or near Nivy or staying in one of the following buildings: Twin City B, Twin City C, Twin City Tower, Nivy Tower, CBC 1, CBC 2, Apollo 3, Apollo 5 and Nové Apollo located in the Nivy zone (the application does not collect location data on other movements), we check the location of the data subject’s mobile device (via Bluetooth (in each building) or WiFi (only in Nivy)) to provide him/her with relevant marketing content at the relevant time and place using “push notifications”;
d) the processing of the personal data of the data subject when downloading, installing and using the “Ahoj Nivy” application, to send customised marketing content based on his/her preferences and to provide 1 extra free hour of parking in addition to the usual amount of free parking.
What is our legal basis for the processing of your personal data?
For the processing activities listed under points c) and d), we process your personal data on the basis of consent in accordance with Article 6 (1) (a) of GDPR. For the processing activities listed under a) and b), we process your personal data on the basis of legitimate interests within the meaning of Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
a) If you are not a registered user of the "Ahoj Nivy" application, we will process the emplate ID, which is a unique identifier of the application installed on your device;
b) sex (if applicable), age (if applicable), date of birth (if applicable), postal code (if applicable), name, surname (if applicable), telephone number (if applicable);
c) localisation data on the respective mobile device, the controller can process information on entering the Nivy centre and on the exact location of the data subject in the proximity of the Nivy centre. Moreover, the Controller can process information on entering and leaving the following buildings: Twin City B, Twin City C, Twin City Tower, Nivy Tower, CBC 1, CBC 2, Apollo 3, Apollo 5 and Nové Apollo;
d) In addition to the emplate ID, we will process the following personal data in the case that the data subject registers an account manually: email address, telephone number, salutation, first name, last name (if provided), date of birth (if provided), ZIP code (if provided); The data subject can also sign in with his/her Apple account. In that case, we will process the email address, first name, last name (if provided), date of birth (if provided), ZIP code (if provided) and gender (if provided). If the data subject registers using a Facebook account, the following information will be collected: email address, full name, profile picture, Facebook user ID, device name, the operating system version, the “Ahoj Nivy” application version, event tracking information including the information that the application was started, consent was given, a screen was viewed in the application, marketing material was viewed in the application, bonus points were obtained, a button was clicked, a notification was received (if notifications were consented to and enabled for the application), product/brand/services and other preferences of the data subject substantial for tailoring marketing content to the preferences of the data subject and to share this information with third parties to prepare targeted advertisements, customised marketing and personalised newsletters to the data subject.
How long do we store your personal data?
a) Your personal data will be processed as long as you have the "Ahoj Nivy" application installed;
b) We store your personal data in an aggregate form for 2 years;
c) We retain your personal data for as long as you allow us to when installing the application and we retain data from iBeacons for 90 days. You can withdraw your consent anytime directly in your phone's operating system;
d) We store your personal data for the period of validity of the consent. You can revoke your consent at any time by using the consent management icon directly in the application.
14. Nivy Grill
What is our purpose for processing your personal data?
We process your personal data to ensure the efficient use of the Grill located on the green roof of Nivy by those interested in barbecuing.
What is our legal basis for the processing of your personal data?
To ensure the provision of Nivy Grill services, your personal data is processed in accordance with Article 6 (1) (b) GDPR.
What kind of personal data do we process?
Name, surname, email, telephone
How long do we store your personal data?
We process your personal data for the duration of our contractual relationship.
15. Wheelchair rental
What is our purpose for and legitimate interest in processing your personal data?
We process your personal data for the purpose of renting a wheelchair, which is available at the information desk at the Nivy mall. Without such processing we would not be able to lend the wheelchair to the requester.
What is our legal basis for the processing of your personal data?
To ensure the provision of wheelchair rental, we process your personal data in accordance with 6(1)(f) of the GDPR.
What kind of personal data do we process?
Name, surname, residence address and telephone number
How long do we keep your personal data?
We keep your personal data for the duration of one month from the time you return the wheelchair.
16. Finding your car in the parking lot
What is our purpose for and legitimate interest in processing your personal data?
Each parking space in our parking lot is captured by a camera that takes a photo of your vehicle and stores it in a database until you leave the parking space. We may process your personal data if at the payment terminal you enter your LPNo, i.e. the LPNo of your car, and the terminal will show you exactly where the vehicle in question is located. Such processing is necessary so that we can provide you with a search service for your vehicle.
What is our legal basis for the processing of your personal data?
Your personal data is processed during the provision of “Find your car” services in accordance with Article 6 (1) (f) GDPR, i.e. we process your personal data on the basis of legitimate interests.
What kind of personal data do we process?
Photos of the vehicle.
How long do we store your personal data?
We will delete the photo of the vehicle once it left the parking place.
17. Nivy Gift card
What is our purpose for and legitimate interest in processing your personal data?
We process your personal data or the personal data of a third (gifted) person when ensuring the provision of a Nivy gift card. The processing of personal data is necessary to ensure the handover process to an authorised person. Without such processing, we would not be able to hand over the card to the card recipient.
What is our legal basis for the processing of your personal data?
To ensure the provision of Nivy gift card services, your personal data or the personal data of third parties is processed in accordance with Article 6 (1) (f) GDPR, i.e. we process your personal data on the basis of legitimate interests.
What kind of personal data do we process?
Name, surname, email address, residence address.
How long do we store your personal data?
We process your personal data for the duration of our contractual relationship.
18. GDPR complaints
What are our purposes for the processing of your personal data?
We strive to protect your privacy as much as possible, and therefore we process your personal data in compliance with GDPR and all other relevant laws. However, if you disagree with the way we handle your personal data, you can exercise your rights via our Data Protection Officer. To ensure that your complaint is handled, some of your personal data has to be processed.
What is our legal basis for the processing of your personal data?
Your personal data is processed while handling your complaint in accordance with Article 6 (1) (c) GDPR, i.e. the processing is necessary for compliance with a legal obligation to which our company is subject.
What kind of personal data do we process?
Personal data provided by you when submitting the complaint (such as name, surname, email, phone number, etc.).
How long do we store your personal data?
We store your personal data strictly during the time necessary to deal with the complaint.
General provision on the retention period
Once we no longer need your personal data for the purposes for which we processed it, we will delete your personal data or archive it for the period of time specified by law or the archiving plan.
With whom do we share your personal data?
We may also share your personal data with companies within the HB Reavis Group. We may also be obliged to disclose your personal data to state authorities and public authorities, (courts and law enforcement authorities i.e. (police and prosecutor), and only to the extent necessary as required by applicable and effective law to exercise their power.
Based on several agreements with third parties, which act as our intermediaries or independent operators, we may provide your personal data, in particular to these companies, to the extent necessary to ensure the provision of services specified for individual companies:
· Apollo Property Management, s.r.o., with its registered office at Mlynské Nivy 16, 821 09 Bratislava, the Slovak Republic, Company Identification Number: 35 868 538, entered in the Commercial Register of the District Court Bratislava I, Section: Sro, File No.: 29941 / B; the company as a processor is the building manager;
· WALL & Partners a. s., with its registered office at Prievozská 4, 821 09 Bratislava, the Slovak Republic, IČO: 36 869 813, entered in the Commercial Register of the District Court Bratislava I, section: Sro, file no.: 5121 / B; the company as a processor operates a CCTV system;
· HB REAVIS Slovakia a. s., having its registered seat at Mlynské Nivy 16, 821 09 Bratislava, the Slovak Republic, ID No.: 31 346 065, registered with the Commercial Register maintained by the District Court Bratislava I, Section: Sa, File No.: 3429/B, the company as a processor ensures marketing activities are carried out;
· HB Reavis Group s. r. o., having its registered seat at Mlynské Nivy 16, 821 09 Bratislava, the Slovak Republic, ID No.: 50 588 427, registered with the Commercial Register maintained by the District Court Bratislava I, Section: Sro, File No.: 115257/B, the company as a processor ensures marketing activities are carried out;
· PosAm, spol. s r.o., having its registered seat at Bajkalská 28, 821 09 Bratislava, the Slovak Republic, ID No.: 31 365 078, registered with the Commercial Register maintained by the District Court Bratislava I, Section: Sro, File No.: 6342/B; the company as an independent controller ensures the payment of parking fees;
· Bloomreach SK s.r.o., with its registered office at Staromestská 3, Bratislava - mestská časť Staré Mesto 811 03, the Slovak Republic, IČO: 50 017 560, entered in the Commercial Register of the District Court Bratislava I, section: Sro, file no.: 107011 / B; the company as a processor ensures the generation of personalised marketing content;
· Emplate ApS, based at Kløvermarksvej 23 8200 Aarhus N Denmark, the company as an independent controller provides the development and functionality of the “Ahoj Nivy” application,
· AVSystem sp.j., a company incorporated under the law of the Republic of Poland, with its registered office at ul. Radzikowskiego 47 D, 31‐315 Kraków, Republic of Poland, registered in the Commercial Register of the District Court of Kraków, Eleventh Commercial Department of the National Court Register, under the number KRS 0000268200, tax identification number (NIP) 677‐228‐04‐51, statistical number ( REGON) 120362919, the company as an independent controller provides WiFi.
· LOYALTEK S.A., having its registered office at 1000 Brussels, Cantersteen 47, Belgium, registered under the number BE 0820.246.648, the company as a processor provides services related to Nivy gift cards.
In addition to the companies listed above, we use the following categories of intermediaries: data centres, hosting - marketing tools - analysis and tracking tools - events, surveys - business operations / management tools - task management and communication tools.
We use analytical and marketing tools (e.g. Google Analytics, Facebook Pixel, LinkedIn Pixel, Hotjar, Luigi´s Box, HubSpot) that collect third-party cookies. The information about your use of websites (including your IP address) generated by the cookies will be transmitted to and stored by the above-mentioned companies also on servers in the United States. We will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. These companies will not associate your IP address with any other data held by them. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not have full functionality of this website. By using our websites, you acknowledge that the above – mentioned companies may process data in the manner and for the purposes set out above.
The processing of personal data together with social media platforms
Nivy and (i) facebook.com and (ii) instagram.com, as the controllers of the relevant social media platforms, may in certain cases also process the personal data of data subjects to a limited extent or in the necessary extent as joint controllers. When using the services provided by these operators of social media platforms, Nivy accesses the conditions of the operation of this website and has no or only a minimal impact on changing these conditions.
Nivy is currently using so-called social plugins from the above-mentioned operators of social networks, which are indicated by their logos on our website. When you visit our website, your browser establishes a direct connection with the servers on which these plugins run. The content of the plugins is transferred directly by Facebook/Instagram to your browser, which then integrates it into our website. The integration of the plugins causes Facebook/Instagram to receive the information that you have accessed on the corresponding page of the Nivy website. If you are logged in with Facebook/Instagram, it will be able to assign your visit to your account on these social networks. Please note that an exchange of this information already takes place when you visit our website regardless of whether you interact with the plugin or not. If you do not want Facebook/Instagram to gather data about you via our website, you must log out of them before visiting our website. Various functionalities and tools are made available to the data subject by each social media platform provider so the data subject can manage his/her preferences for displaying advertisements and sending messages with advertising content, or the data subject can exercise his/her right guaranteed by GDPR. Nivy has no impact on such processing (it may not disable or enable such processing as part of the operation of its sites or media channels) - the creation of site or media channel statistics by the relevant social media platform operators (see above) for Nivy. The webpage’s statistics are generally based on personal data collected in connection with the visit or the interaction of the data subject with the site or media channel and its content. Within the functionality of webpages and media channels, Nivy can be acquainted with these statistics and deal with them. If you do not want Facebook/ Instagram to collect information about you through our website, you must log out of them before visiting the website. For more information about how these social networks process your personal data, please see their privacy policy:
Facebook: https://www.facebook.com/privacy/explanation Instagram: https://help.instagram.com/155833707900388
From whom do we get personal data?
We get personal data from you, from third parties and from our tenants.
Do we use automated individual decision making?
Yes, we use automated individual decision making to provide personalised content on our website and application. However, we do not make any decisions based solely on automated processing that have legal effects on you or that significantly affect you. We analyse your behaviour on our website or in the "Ahoj Nivy" application solely to provide more attractive offers for the purchasing of goods and/or services and to adapt the content of the website to your preferences.
Do we transfer your personal data to third countries?
Your personal data is processed within the territory of the Slovak Republic and other states of the European Union. Your personal data can be processed by a country outside of the European Union if this third country has been confirmed by the European Commission as a country with an adequate level of data protection or if other appropriate data protection safeguards exist (for example, binding corporate privacy rules or EU standard data protection clauses).
What are your rights?
Your rights as a data subject are stated below. Please note that the exact conditions to exercise these rights are set out in detail in Chapter III of GDPR, while in particular circumstances not all rights may be exercised. You have the following rights:
· Access to the personal data we process about you
· Rectification of incorrect or inaccurate personal data and adding incomplete personal data
· Restriction, i.e. blocking of the processing of your personal data
· The deletion of personal data in case of an absence of purpose or unauthorised data processing
· Submission of an objection to the processing of personal data if you believe that our data processing is not justified
· To be excluded from automated decision making
· Listing of personal data in a structured and machine-readable format or for another controller
· Revocation of consent to the processing of personal data
· To lodge a complaint with the supervisory authority
How can you exercise your rights?
Electronically: dataprivacy@hbreavis.com
In writing to the address: Twin City C, to attn: compliance department, Mlynské Nivy 16, 821 09 Bratislava
Telephone: +421 918 723 243
We strive to protect your privacy as much as possible, and therefore we process your personal data in compliance with GDPR and all other relevant laws. However, if you disagree with the way we handle your personal data, you can exercise your rights by contacting our Data Protection Officer: Erika Wild, contact point at Twin City C, Mlynské Nivy 16, 821 09 Bratislava, the Slovak Republic, tel. +421 918 723 243, email: dataprivacy@hbreavis.com
Or you can file a complaint with the supervisory authority regarding the processing of your personal data. Your local supervisory authority may be found at https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.